Hey guys -
I was recently put on to the elastic search for log collection and monitoring. Seeing as though I'm the only sysadmin in the company, I'd like to be able to cut down on the time it takes me to run through logs. We run an on-prem virtual environment. Everything I've read is showing that I would need multiple (upwards of 3-4) servers for this to run properly. Can anyone shed any light on what sort of specs I'd need to cut that in half and run effectively? We run around 12-15 virtual servers.
Thanks!